First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-21991

HighCVSS 8.1/10Last modified Oct 8, 2026

Description

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Visual Studio Code	>= 1.0.0, < 1.64.1

References

Timeline

Published: Feb 9, 2022
Last modified: Oct 8, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219927.8Windows Mobile Device Management Remote Code Execution Vulnerability CVE-2022-219937.5Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability CVE-2022-219947.8Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2022-219957.9Windows Hyper-V Remote Code Execution Vulnerability CVE-2022-219967.8Win32k Elevation of Privilege Vulnerability CVE-2022-219977.1Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-219985.5Windows Common Log File System Driver Information Disclosure Vulnerability CVE-2022-219997.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-22008.8If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading t CVE-2022-220007.8Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2022-220017.8Windows Remote Access Connection Manager Elevation of Privilege Vulnerability CVE-2022-220025.5Windows User Account Profile Picture Denial of Service Vulnerability

CVE-2022-21991: High severity, CVSS 8.1 | Vulnix